GET aHEAD
March 13, 2025Problem Description
*Find the flag being held on this server to get ahead of the competition http://mercury.picoctf.net:21939/
- Target: http://mercury.picoctf.net:21939/
- Goal: extract a flag
- Initial Observations: Seems like I would need burp suite to see request
Tools Used
- Burp Suite
Solution Steps
-
Viewing the source code of the web page
I saw that if the http method is get the background color is red and if the http method post the color is blue. I noticed some thing interesting the name of the challenge is get aHEAD so let’s try the HEAD method and see what happens.
Hope that you found this useful.